Huckabee is one of the fastest growing A/E firms in the nation and one of the top educational design firms. We are a mission-driven company that is dedicated to the success of all students. What we do matters, which is why we look for people who share our passion for changing the world through design and who want to create an impact of excellence on education. If you are ready to join our movement, reach out!

Currently we are accepting resumes for an Information Security Manager to join the team. This role is pivotal in recommending, implementing, and managing corporate programs (policies, standards, processes, and technologies) to safeguard the MOREgroup’s family of brands information assets. This role combines in-depth cyber security expertise, disaster recovery, business continuity planning, and the oversight of managed security services, particularly integrating and optimizing our elected security vendor solutions within our security framework. The analyst acts as the subject matter expert in cyber security, disaster recovery, business continuity, and regulatory compliance, ensuring that the MOREgroup’s information security measures are robust, agile, and aligned with business objectives.

RESPONSIBILITIES

• Oversee the collaboration and engage with our primary security vendor services, ensuring seamless alignment with internal security operations and objectives.
• Regularly evaluate the effectiveness of our security managed services, coordinating adjustments to ensure optimal security posture and compliance with industry standards.
• Coordinate testing, reporting, and remediation activities related to security assessments and penetration testing, incorporating insights from our security vendors and employee security training solutions.
• Maintain and update the repository of critical recovery and continuity documentation, ensuring alignment with our incident response frameworks and insights.
• Conduct periodic audits of access permissions and usage statistics, leveraging analytics to inform and optimize the ‘minimum necessary’ access strategy.
• Manage and oversee a sustainable planner platform and related emergency management, business continuity, disaster recovery, and incident response functions.
• Regularly update and maintain Criticality Assessment revisions for IR/DR documentation, integrating our incident response strategies and constantly evolving threat intelligence.
• Monitor and report on critical incident alerts and security breaches, utilizing our security vendor’s detailed incident analysis to enhance forensic investigations and preemptive security measures.
• Develop and maintain technology change management processes, ensuring that they incorporate the latest security practices and insights gained from market trends and cyber-security intelligence to enhance our managed detection and response practices.
• Provide guidance on IT projects to ensure adherence to best security practices and compliance, drawing upon both internal policies and security vendor collaborative expertise.
• Assist in defining and updating the customer impact matrix for the Service Desk

REQUIREMENTS

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related field
• Minimum of 3-5 years of experience in information security or a related field
• Proven experience with incident response, disaster recovery planning, and business continuity management
• Demonstrable experience in integrating and managing managed security services, ideally with exposure to Crowdstrike’s services and platform offerings
• Excellent communication skills with the ability to explain complex security concepts to non-technical stakeholders
• Strong teamwork skills, with experience in cross-functional collaboration
• Certifications such as CISSP, CISM, or equivalent is highly desirable
• Ability to analyze security data and reports to identify trends and recommend actionable insights
• Strategic mindset to integrate security measures with broader business objectives